gcdRadar
archive/Patch now/AIR-2023-0078
closedclosed 19 Dec 2023Patch now2 Disclosed vulnerabilityAI

CVE-2023-6730: Deserialization vulnerability in Hugging Face transformers

transformers

A critical insecure deserialization vulnerability exists in the Hugging Face transformers library prior to version 4.36.0. The flaw could enable arbitrary code execution if exploited.

disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why

CVSS
9.0
EPSS
0.01 · top 40% · 2026-11-13
EPSS scores by FIRST
fix status
Fix status unknown
first report
19 Dec 2023
last update
19 Dec 2023
CVE ids
CVE-2023-6730other records

Timeline · 1

  1. 19 Dec 2023CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability

Sources · 1

Advisories and databases

  1. 2023-12-19
    CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability
    GitHub Advisory Database · github.com/advisories/GHSA-3863-2447-669p

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Patch now
AI role
Attack on AI
categories
Infrastructure vulnerabilitySupply chain
severity
2 · Disclosed vulnerability
fix status
Fix status unknown
targets
Framework / tooling
owasp llm top 10
LLM03:2025 Supply Chain
mitre atlas
AML.T0010 AI Supply Chain Compromise
tags
deserialization
dates
happened 19 Dec 2023 · first reported 19 Dec 2023
origin
GitHub Advisory Database
Vulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
record
confidence 0.95 · created 2026-10-18 07:00Z · updated 2026-10-18 07:00Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CVE-2023-6730: Deserialization vulnerability in Hugging Face transformers

https://gcdradar.vercel.app/incidents/cve-2023-6730-deserialization-vulnerability-in-hugging-face · AIR-2023-0078 · closed 2023-12-19

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2023-12-19
- AI role: Attack on AI
- Products: transformers
- CVE ids: CVE-2023-6730
- CVSS: 9

## Summary

A critical insecure deserialization vulnerability exists in the Hugging Face transformers library prior to version 4.36.0. The flaw could enable arbitrary code execution if exploited.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2023-12-19: CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability (https://github.com/advisories/GHSA-3863-2447-669p)

## Sources

- 2023-12-19 GitHub Advisory Database: CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability https://github.com/advisories/GHSA-3863-2447-669p

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed3.4
    Hugging Face libraries Hugging Face Transformers Deserialization Remote Code Execution

    Patch now · Disclosed · since 10 Apr 2024 · CVE-2024-3568

    AI
  2. closed9.6
    llama-cpp-python CVE-2024-34359: Llama-cpp-python remote code execution via Jinja2 chat templates

    Patch now · Disclosed · since 13 May 2024 · updated 14 May 2024 · CVE-2024-34359

    AI
  3. closed8.8
    llama.cpp Heap-based buffer overflow in llama.cpp header.n_kv

    Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-23605

    AI
  4. closed8.8
    llama.cpp Heap-based buffer overflow in llama.cpp info-ne

    Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-21802

    AI
  5. closed8.8
    llama.cpp Heap-based buffer overflow in llama.cpp gguf_fread_str

    Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-23496

    AI
  6. closed7.8
    Hugging Face libraries CVE-2023-7018: Deserialization vulnerability in Hugging Face transformers

    Patch now · Disclosed · since 20 Dec 2023 · CVE-2023-7018

    AI